专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20180191494A1 Graphics Processor With Encrypted Kernels 审中-公开
公开(公告)号：US20180191494A1
公开(公告)日：2018-07-05
申请号：US15394324
申请日：2016-12-29
申请人： Balaji Vembu , Vidhya Krishnan , Sandeep S. Sodhi , Scott Janus , Daniel Nemiroff
发明人： Balaji Vembu , Vidhya Krishnan , Sandeep S. Sodhi , Scott Janus , Daniel Nemiroff
IPC分类号： H04L9/08 , G06F21/57
CPC分类号： H04L9/14 , G06F21/74 , G06F21/75
摘要： An embodiment of a graphics apparatus may include a graphics processor including a kernel executor, and a security engine communicatively coupled to the graphics processor. The security engine may be configured to create a kernel security key, encrypt an executable kernel for the kernel executor in accordance with the kernel security key, and share the kernel security key with the graphics processor.

2. 发明授权

US09367328B2 Out-of-band host OS boot sequence verification 有权
标题翻译：带外主机操作系统启动顺序验证
公开(公告)号：US09367328B2
公开(公告)日：2016-06-14
申请号：US13536859
申请日：2012-06-28
申请人： Daniel Nemiroff , Paul J. Thadikaran , Andrew H. Gafken , Purushottam Goel , Nicholas D. Triantafillou , Paritosh Saxena , Debra Cablao
发明人： Daniel Nemiroff , Paul J. Thadikaran , Andrew H. Gafken , Purushottam Goel , Nicholas D. Triantafillou , Paritosh Saxena , Debra Cablao
IPC分类号： G06F11/30 , G06F9/44 , G06F21/55 , G06F21/57 , H04L9/32
CPC分类号： G06F21/577 , G06F9/4401 , G06F21/554 , G06F21/561 , G06F21/575 , G06F21/6218 , G06F21/64 , G06F2221/033 , H04L9/3247
摘要： Embodiments of techniques and systems for out-of-band verification of host OS components are described. In embodiments, a out-of-band host OS boot sequence verification system (“BSVS”) may access system memory without detection by a host OS process, or “out of band.” The BSVS may access host OS components in the system memory and may generate signatures from memory footprints of the host OS components. These signatures may then be compared to trusted signatures to verify integrity of the host OS components. In embodiments, this verification may be performed during a boot of a host OS or on demand. In embodiments, the trusted signatures may be pre-stored by the BSVS before a boot; in some embodiments, the trusted signatures may be previously-computed and then stored by the BSVS. Other embodiments may be described and claimed.
摘要翻译：描述用于主机OS组件的带外验证的技术和系统的实施例。在实施例中，带外主机OS引导序列验证系统（“BSVS”）可以在主机OS进程或“带外”检测的情况下访问系统存储器.BSVS可以访问系统存储器中的主机OS组件并且可以从主机OS组件的内存覆盖区生成签名。然后可以将这些签名与可信签名进行比较以验证主机OS组件的完整性。在实施例中，可以在主机OS的引导期间或者根据需要执行该验证。在实施例中，信任签名可以在引导之前被BSVS预先存储; 在一些实施例中，可信任签名可以被预先计算，然后由BSVS存储。可以描述和要求保护其他实施例。

3. 发明申请

US20150095650A1 PUBLIC KEY INFRASTRUCTURE FOR SYSTEM-ON-CHIP 有权
标题翻译：公共关键基础设施系统芯片
公开(公告)号：US20150095650A1
公开(公告)日：2015-04-02
申请号：US14039667
申请日：2013-09-27
申请人： Daniel Nemiroff , William Stevens, JR.
发明人： Daniel Nemiroff , William Stevens, JR.
IPC分类号： H04L9/32 , H04L9/08
CPC分类号： H04L9/3263 , G09C1/00
摘要： The present disclosure is generally related to embedding public key infrastructure information to a system-on-chip (SOC). The method includes generating a key pair including a public key and a private key. The method includes creating a digital certificate corresponding to the public key. The method includes signing the digital certificate with a unique signature. The method includes extracting the public key and the unique signature into a key file, wherein the key file is to be stored in a plurality of silicon fuses on the SOC.
摘要翻译：本公开通常涉及将公共密钥基础设施信息嵌入到片上系统（SOC）。该方法包括生成包括公钥和私钥的密钥对。该方法包括创建对应于公钥的数字证书。该方法包括使用唯一签名签署数字证书。该方法包括将公钥和唯一签名提取到密钥文件中，其中密钥文件将存储在SOC上的多个硅熔丝中。

4. 发明申请

US20140112471A1 Method and Apparatus for Building a Hardware Root of Trust and Providing Protected Content Processing Within an Open Computing Platform 有权
标题翻译：在开放式计算平台内建立信任硬件根并提供受保护内容处理的方法和装置
公开(公告)号：US20140112471A1
公开(公告)日：2014-04-24
申请号：US14139422
申请日：2013-12-23
申请人： Ramesh Pendakur , Walter C. Gintz , Daniel Nemiroff , Mousumi M. Hazra
发明人： Ramesh Pendakur , Walter C. Gintz , Daniel Nemiroff , Mousumi M. Hazra
IPC分类号： H04N21/4367 , H04L9/32 , H04N21/6334 , G06F21/12
CPC分类号： H04N21/4367 , G06F21/123 , G06F21/72 , H04L9/3234 , H04N21/4181 , H04N21/43635 , H04N21/4408 , H04N21/63345
摘要： A system architecture provides a hardware-based root of trust solution for supporting distribution and playback of premium digital content. In an embodiment, hardware root of trust for digital content and services is a solution where the basis of trust for security purposes is rooted in hardware and firmware mechanisms in a client computing system, rather than in software. From this root of trust, the client computing system constructs an entire media processing pipeline that is protected for content authorization and playback. In embodiments of the present invention, the security of the client computing system for content processing is not dependent on the operating system (OS), basic input/output system (BIOS), media player application, or other host software.
摘要翻译：系统架构提供了一种基于硬件的信任根基，用于支持高级数字内容的分发和播放。在一个实施例中，用于数字内容和服务的信任的硬件根源是用于安全目的的信任基础植根于客户端计算系统中的硬件和固件机制而不是软件的解决方案。从这个信任根源，客户端计算系统构建了一个受保护内容授权和播放的整个媒体处理流水线。在本发明的实施例中，用于内容处理的客户端计算系统的安全性不依赖于操作系统（OS），基本输入/输出系统（BIOS），媒体播放器应用或其他主机软件。

5. 发明授权

US08521006B2 Boundary detection in media streams 有权
标题翻译：媒体流中的边界检测
公开(公告)号：US08521006B2
公开(公告)日：2013-08-27
申请号：US12775003
申请日：2010-05-06
申请人： Daniel Nemiroff , Balaji Vembu , Raul Gutierrez , Suryaprasad Kareenahalli
发明人： Daniel Nemiroff , Balaji Vembu , Raul Gutierrez , Suryaprasad Kareenahalli
IPC分类号： H04N5/94
CPC分类号： G11B27/3027 , G11B27/28
摘要： Encoded data decoding techniques. A data decoding agent determines a data segment size for a packet that includes a header and a data segment. The data decoding agent determines a segment end location based, at least in part, on the data segment size. The data decoding agent processes subblocks of data from the data segment. The data decoding agent compares a current location to the segment end location to determine if a current subblock of data from the data segments contains the segment end location. The data decoding agent triggers an exception handler if the current subblock contains the segment end location.
摘要翻译：编码数据解码技术。数据解码代理确定包括报头和数据段的分组的数据段大小。数据解码代理至少部分地基于数据段大小来确定段结束位置。数据解码代理处理来自数据段的数据的子块。数据解码代理将当前位置与段结束位置进行比较，以确定来自数据段的当前数据子块是否包含段结束位置。如果当前子块包含段结束位置，则数据解码代理触发异常处理程序。

6. 发明申请

US20120173877A1 METHOD AND APPARATUS FOR BUILDING A HARDWARE ROOT OF TRUST AND PROVIDING PROTECTED CONTENT PROCESSING WITHIN AN OPEN COMPUTING PLATFORM 有权
标题翻译：用于建立信任的硬件根和在开放式计算平台中提供保护内容处理的方法和装置
公开(公告)号：US20120173877A1
公开(公告)日：2012-07-05
申请号：US12984737
申请日：2011-01-05
申请人： Ramesh Pendakur , Walter C. Gintz , Daniel Nemiroff , Mousumi M. Hazra
发明人： Ramesh Pendakur , Walter C. Gintz , Daniel Nemiroff , Mousumi M. Hazra
IPC分类号： H04L9/32 , H04N7/167
CPC分类号： H04N21/4367 , G06F21/123 , G06F21/72 , H04L9/3234 , H04N21/4181 , H04N21/43635 , H04N21/4408 , H04N21/63345
摘要： A system architecture provides a hardware-based root of trust solution for supporting distribution and playback of premium digital content. In an embodiment, hardware root of trust for digital content and services is a solution where the basis of trust for security purposes is rooted in hardware and firmware mechanisms in a client computing system, rather than in software. From this root of trust, the client computing system constructs an entire media processing pipeline that is protected for content authorization and playback. In embodiments of the present invention, the security of the client computing system for content processing is not dependent on the operating system (OS), basic input/output system (BIOS), media player application, or other host software.
摘要翻译：系统架构提供了一种基于硬件的信任根基，用于支持高级数字内容的分发和播放。在一个实施例中，用于数字内容和服务的信任的硬件根源是用于安全目的的信任基础植根于客户端计算系统中的硬件和固件机制而不是软件的解决方案。从这个信任根源，客户端计算系统构建了一个受保护内容授权和播放的整个媒体处理流水线。在本发明的实施例中，用于内容处理的客户端计算系统的安全性不依赖于操作系统（OS），基本输入/输出系统（BIOS），媒体播放器应用或其他主机软件。

7. 发明申请

US20050108730A1 Data migration 有权
标题翻译：数据迁移
公开(公告)号：US20050108730A1
公开(公告)日：2005-05-19
申请号：US10716932
申请日：2003-11-18
申请人： Francis Corrado , Daniel Nemiroff
发明人： Francis Corrado , Daniel Nemiroff
IPC分类号： G06F3/00 , G06F3/06
CPC分类号： G06F3/0665 , G06F3/0605 , G06F3/0647 , G06F3/0689 , G06F11/1441
摘要： In one embodiment, a method is provided that may include, issuing a read request to request reading of at least one portion of data stored in a first storage device and issuing a write request to request writing of the at least one portion of the data into a second storage device or at least one location in the first storage device. The at least one location may be comprised in a volume of a redundant array of expensive disks (RAID). The method of this embodiment also may include, if a request to access one or more other portions of the data is received and/or issued by one or more operating system processes while the reading and/or the writing is occurring, issuing an access request to request accessing of the one or more other portions of the data. Of course, many modifications are possible without departing from this embodiment.
摘要翻译：在一个实施例中，提供了一种方法，其可以包括：发出读取请求以请求读取存储在第一存储设备中的数据的至少一部分，并发出写入请求，以请求将至少一部分数据写入到第二存储设备或第一存储设备中的至少一个位置。至少一个位置可以包括在昂贵磁盘（RAID）的冗余阵列的卷中。该实施例的方法还可以包括，如果在读取和/或写入正在发生时由一个或多个操作系统进程接收和/或发出访问数据的一个或多个其他部分的请求，则发出访问请求以请求访问数据的一个或多个其他部分。当然，在不偏离本实施例的情况下，可以进行许多修改。

8. 发明授权

US09100693B2 Methods and apparatuses for securing playback content 有权
标题翻译：保护播放内容的方法和装置
公开(公告)号：US09100693B2
公开(公告)日：2015-08-04
申请号：US12796502
申请日：2010-06-08
申请人： Balaji Vembu , Suryaprasad Kareenahalli , Daniel Nemiroff , Zohar Bogin , Raul Gutierrez
发明人： Balaji Vembu , Suryaprasad Kareenahalli , Daniel Nemiroff , Zohar Bogin , Raul Gutierrez
IPC分类号： H04L29/06 , H04N21/4405 , H04N21/426 , H04N21/4408 , G06F21/10
CPC分类号： H04N21/4405 , G06F21/10 , H04N21/4181 , H04N21/42623 , H04N21/4408
摘要： An apparatus for secured playback is presented. In one embodiment, the apparatus includes a controller that includes a key derivation module to manage authentication and key derivation. In one embodiment, the apparatus provides a video decryption key to a graphics engine if video data portions in a data stream are retrievable without having to decrypt the data stream. In one embodiment, the apparatus also includes a decryption module to decrypt a part of data in conjunction with an encryption key to generate video information and video data. The controller then writes an encrypted version of the video data to a video buffer of a graphics engine.
摘要翻译：提出了一种用于安全播放的设备。在一个实施例中，该装置包括控制器，其包括用于管理认证和密钥推导的密钥导出模块。在一个实施例中，如果可以检索数据流中的视频数据部分而不必对数据流进行解密，则该装置向图形引擎提供视频解密密钥。在一个实施例中，该装置还包括解密模块，用于结合加密密钥对一部分数据进行解密以产生视频信息和视频数据。然后，控制器将视频数据的加密版本写入图形引擎的视频缓冲器。

9. 发明授权

US08971530B2 Cryptographic key generation using a stored input value and a stored count value 有权
标题翻译：使用存储的输入值和存储的计数值的加密密钥生成
公开(公告)号：US08971530B2
公开(公告)日：2015-03-03
申请号：US12456909
申请日：2009-06-24
申请人： Daniel Nemiroff
发明人： Daniel Nemiroff
IPC分类号： H04L9/00 , H04L9/06 , H04L9/08 , G06F1/02 , G06F7/58
CPC分类号： H04L9/0869 , G06F7/582 , G06F7/588 , H04L9/0662 , H04L9/0861 , H04L9/3249 , H04L2209/24 , H04L2209/72
摘要： Embodiments of an invention for cryptographic key generation using a stored input value and a stored count value have been described. In one embodiment, a processor includes non-volatile storage storing an input value and a count value, and logic to generate a cryptographic key based on the stored input value and the stored count value.
摘要翻译：已经描述了使用存储的输入值和存储的计数值的密码密钥生成的发明的实施例。在一个实施例中，处理器包括存储输入值和计数值的非易失性存储器，以及基于存储的输入值和存储的计数值来产生密码密钥的逻辑。

10. 发明申请

US20120155633A1 AUDIO CONTENT PROTECTION 有权
标题翻译：音频内容保护
公开(公告)号：US20120155633A1
公开(公告)日：2012-06-21
申请号：US12971210
申请日：2010-12-17
申请人： Kar Leong Wong , Suryaprasad Kareenahalli , Daniel Nemiroff
发明人： Kar Leong Wong , Suryaprasad Kareenahalli , Daniel Nemiroff
IPC分类号： H04L9/28
CPC分类号： H04L9/0822 , H04L9/3263 , H04L2209/60
摘要： In some embodiments an embedded processor is to participate in cryptographic key exchange with an audio software application, and a key exchange communication path is coupled between the audio software application and the embedded processor. Other embodiments are described and claimed.
摘要翻译：在一些实施例中，嵌入式处理器将参与与音频软件应用的加密密钥交换，并且密钥交换通信路径耦合在音频软件应用和嵌入式处理器之间。描述和要求保护其他实施例。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式